Separating the bee from the panda: CeranaKeeper making a beeline for Thailand

SUMMARY :

This intelligence report details a sophisticated malware campaign targeting multiple industries across various countries. The threat actor employs advanced tactics, techniques, and procedures (TTPs) to infiltrate networks, maintain persistence, and exfiltrate sensitive data. The malware used in this campaign is highly modular and adaptable, allowing the attackers to customize their approach for each target. The report highlights the use of social engineering, exploits for known vulnerabilities, and custom-built tools to achieve their objectives. It also provides indicators of compromise (IoCs) and recommendations for detection and mitigation.

OPENCTI LABELS :

social engineering,data exfiltration,advanced persistent threat,custom malware,multi-industry targeting,persistence techniques,network infiltration


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


Separating the bee from the panda: CeranaKeeper making a beeline for Thailand